JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 185.146.112.6

185.146.112.6 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 24%: ?

24%

ISP	AG Telekom MMC.
Usage Type	Fixed Line ISP
ASN	AS57293
Hostname(s)	6-dynamic-ip.katv1-dot-net
Domain Name	katv1.az
Country	🇦🇿 Azerbaijan
City	Baku, Baki

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 185.146.112.6

Whois 185.146.112.6

IP Abuse Reports for 185.146.112.6:

This IP address has been reported a total of 33 times from 23 distinct sources. 185.146.112.6 was first reported on July 27th 2025, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 鬼影233	2026-10-26 05:52:09 (23 hours ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 LRob	2026-10-14 09:52:37 (1 week ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /pp \| ua: Mozilla/5.0 (Macintosh ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /pp \| ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3.1 Safari/605.1.15 show less	Bad Web Bot
🇫🇷 Sklurk	2026-09-27 02:12:33 (1 month ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 12:19:19 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 185.146.112.6 (nat-pool-185.146.112.6.katv1.net ... show more (mod_security) mod_security (id:210350) triggered by 185.146.112.6 (nat-pool-185.146.112.6.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:19:15.118961 2026] [security2:error] [pid 2046:tid 2046] [client 185.146.112.6:64540] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|godscreationobservatory.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "godscreationobservatory.com"] [uri "/"] [unique_id "aqvaw7tHCBSGIUhRBwAo7AAAABM"], referer: https://bulkdaandpachecker.store/dir/seo-ranking-links-83422 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-08-20 15:31:14 (2 months ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 show less	Bad Web Bot
Anonymous	2026-08-18 12:17:30 (2 months ago)	Distributed scraper residential proxy pool — www.publicprinceton.com /store/filtered/ (WineCommerce ... show more Distributed scraper residential proxy pool — www.publicprinceton.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host
🇺🇸 kosada.com	2026-08-16 18:26:01 (2 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇩🇪 pltcldvlpr	2026-07-20 19:39:25 (3 months ago)	Bogus Useragent: 185.146.112.6 - - [20/Jul/2026:21:39:24 +0200] "GET /protocol?id=rp_16_71&offset=15 ... show more Bogus Useragent: 185.146.112.6 - - [20/Jul/2026:21:39:24 +0200] "GET /protocol?id=rp_16_71&offset=1500&seq=1694 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MSIE 8.0; Windows 98; Trident/4.0)" asn=57293 org="AG Telekom MMC." country=AZ ... show less	Bad Web Bot
🇰🇷 zlhIcd	2026-06-19 00:28:02 (4 months ago)	185.146.112.6 - - [16/Jun/2026:03:27:54 +0900] "GET /pcwiki/index.php?days=30&from=20251212055247&hi ... show more 185.146.112.6 - - [16/Jun/2026:03:27:54 +0900] "GET /pcwiki/index.php?days=30&from=20251212055247&hidemyself=0&limit=500&title=%ED%8A%B9%EC%88%98%EA%B8%B0%EB%8A%A5:%EB%A7%81%ED%81%AC%EC%B5%9C%EA%B7%BC%EB%B0%94%EB%80%9C HTTP/1.1" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" ... show less	Web Spam SQL Injection Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 05:36:22 (6 months ago)	(mod_security) mod_security (id:225080) triggered by 185.146.112.6 (nat-pool-185.146.112.6.katv1.net ... show more (mod_security) mod_security (id:225080) triggered by 185.146.112.6 (nat-pool-185.146.112.6.katv1.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 01:36:15.827902 2026] [security2:error] [pid 2530278:tid 2530278] [client 185.146.112.6:18389] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^[\\\\d\\\\.ab]+$" against "ARGS_GET:C" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "143"] [id "225080"] [rev "1"] [msg "COMODO WAF: XSS vulnerability in Plupload before 2.1.9 or MediaElement.js before 2.21.0, as used in WordPress before 4.5.2 (CVE-2016-4566 & CVE-2016-4567)\|\|www.cffragrances.iee-usa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.cffragrances.iee-usa.com"] [uri "/wp-includes/js/tinymce/plugins/spellchecker/includes/"] [unique_id "aemvzytAcRFlHaZ0OKdpngAAABU"], referer: http://www.cffragrances.iee-usa.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 A000Z	2026-04-10 08:49:54 (6 months ago)	Fail2Ban: 185.146.112.6 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5. ... show more Fail2Ban: 185.146.112.6 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36 show less	Bad Web Bot
🇺🇸 kosada.com	2026-03-19 14:09:15 (7 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇨🇳 ThreatBook.io	2026-01-20 22:20:26 (9 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/185.146.112.6	SSH
🇺🇸 MPL	2026-01-20 16:14:45 (9 months ago)	tcp/23 (6 or more attempts)	Port Scan
🇺🇸 RAP	2026-01-20 07:56:02 (9 months ago)	2026-01-20 07:56:02 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.32.209.228

🇸🇬 152.42.230.131

🇩🇪 94.183.174.95

🇪🇸 89.47.239.162

🇹🇭 27.130.143.252

🇮🇳 223.233.78.154

🇺🇸 193.3.53.9

🇧🇷 187.87.144.234

🇮🇳 182.70.63.221

🇺🇸 147.185.132.30

🇺🇸 129.121.98.40

🇻🇳 116.98.0.181

🇨🇦 85.217.149.57

🇺🇸 72.17.34.38

🇲🇾 49.124.152.243

🇵🇱 45.138.12.65

🇨🇳 43.196.165.182

🇺🇸 216.24.219.30

🇲🇳 202.72.245.163

🇧🇪 198.235.24.194